Palo Alto Networks

Palo Alto Networks Tenant Service Groups API

Tenant Service Group lifecycle management and hierarchy queries.

GitHub OpenAPI
Business capability
Tenant Provisioning & Lifecycle BC-4230.10

Operations 6

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /tenant-service-groups List Tenant Service Groups · Palo Alto Networks List Tenant Service Groups #
Ask an LLM
“Which Tenant Service Groups can my service account see?”
“Can I filter the TSG list to the direct children of one parent?”
Tell an agent
List the Tenant Service Groups I have access to.
List TSGs whose parent is {parent_id}, {limit} per page.
POST /tenant-service-groups Create a Tenant Service Group · Palo Alto Networks Create Tenant Service Group #
Ask an LLM
“How do I create a new tenant under an existing TSG?”
“What do I need to set up a Tenant Service Group in the hierarchy?”
Tell an agent
Create a TSG named {display_name} under parent {parent_id}.
Add tenant {display_name} below {parent_id} in region {region}.
GET /tenant-service-groups/{tsg_id} Get Tenant Service Group details · Palo Alto Networks Get Tenant Service Group Details #
Ask an LLM
“What licenses and status does a specific Tenant Service Group have?”
“Can I see a TSG's parent and description?”
Tell an agent
Show the details of TSG {tsg_id}.
Get license allocations and status for tenant service group {tsg_id}.
PUT /tenant-service-groups/{tsg_id} Update a Tenant Service Group · Palo Alto Networks Update Tenant Service Group #
Ask an LLM
“How do I rename a Tenant Service Group?”
“Can I change a TSG's parent after it's created?”
Tell an agent
Rename TSG {tsg_id} to {display_name}.
Update the description of tenant service group {tsg_id} to {description}.
DELETE /tenant-service-groups/{tsg_id} Delete a Tenant Service Group · Palo Alto Networks Delete Tenant Service Group #
Ask an LLM
“How do I permanently remove a Tenant Service Group?”
“Can I delete a TSG that still has child tenants or active subscriptions?”
Tell an agent destructive · confirm first
Delete TSG {tsg_id}.
Permanently remove tenant service group {tsg_id}.
GET /tenant-service-groups/{tsg_id}/children List child TSGs of a Tenant Service Group · Palo Alto Networks List Child Tenant Service Groups #
Ask an LLM
“Which tenants sit directly under a given TSG?”
“How can I walk down a multi-level tenant hierarchy?”
Tell an agent
List the direct children of TSG {tsg_id}.
Show up to {limit} child tenants under {tsg_id}.

Specifications

⚙
OpenAPI
https://artifacts.apis.io/palo-alto-networks/openapi/palo-alto-networks-tenant-service-groups-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-tenant-service-groups-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-tenant-service-groups-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks AIOps for NGFW BPA 5G Deregistered Trend…
  description: AIOps for NGFW Best Practice Assessment (BPA) API. Provides programmatic access to submit BPA requests for Palo Alto Networks next-generation firewalls, check request processing status, and retrieve completed assessment reports. BPA reports analyze firewall configurations against Palo Alto Networks best practices and security benchmarks, identifying gaps and providing remediation guidance to improve security posture. Part of the Strata Cloud Manager platform.
  version: '1.0'
  contact:
    name: Palo Alto Networks Developer Support
    url: https://pan.dev/
  license:
    name: Proprietary
    url: https://www.paloaltonetworks.com/legal
servers:
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
  description: AIOps for NGFW BPA API production server.
security:
- oauth2Bearer: []
tags:


# --- truncated at 32 KB (34 KB total) ---
# Full source: https://artifacts.apis.io/palo-alto-networks/openapi/palo-alto-networks-tenant-service-groups-api-openapi.yml